This position is for a Principal Security Researcher at Google, offered by Huntress, and is fully remote within the United States.
The role involves joining a skilled security team dedicated to protecting millions of endpoints globally by developing innovative defenses against cyber threats.
Responsibilities include leading the development of layered defense strategies, investigating identity compromises, hunting threat actors, testing attack paths, and developing exploit proofs-of-concept.
The researcher will identify and validate telemetry signals of malicious activity, reverse engineer technology for security weaknesses, and document findings through reports and blogs.
Collaboration with product, engineering, and security teams is essential to prioritize impactful features and product launches.
The role also includes promoting security awareness through media and educational initiatives.
Candidates should have expert knowledge of Google logs and APIs, proven experience bypassing Google security controls, and the ability to shift between various roles with a builder mindset.
Experience in multi-tenant environments, knowledge of IT automation tools, and familiarity with Elastic and Kibana are preferred.
Excellent organizational and communication skills are required, along with a passion for making complex security concepts accessible.
Requirements:
Candidates must have expert knowledge of Google logs and APIs, with the ability to access and test Google data beyond native tools.
Proven experience in bypassing Google security controls, including multi-factor authentication, and executing account takeovers is necessary.
Applicants should be skilled at building reliable weaponized exploit proofs-of-concept for identified vulnerabilities.
A strong understanding of Google vulnerabilities and threats, with hands-on testing experience in custom labs, is required.
The ability to shift between red team, system admin, and defender roles with a builder mindset is essential.
Experience working in multi-tenant environments, such as MSPs and Google Workspace business plans, is preferred.
Knowledge of IT automation tools like PSAs and RMMs is a plus.
Experience with Elastic, Kibana, and security conference presentations or community education is advantageous.
Excellent organizational and communication skills are required, along with a passion for translating complex security concepts into accessible insights.
Benefits:
The position offers a competitive salary range of $210,000 to $240,000 base, plus bonus and equity.
Employees receive generous paid time off, including vacation, sick leave, and paid holidays.
There is a provision for 12 weeks of paid parental leave.
Comprehensive medical, dental, and vision insurance plans are provided.
A 401(k) plan with a 5% employer contribution is available regardless of employee input.
Life and disability insurance coverage is included.
Stock options are offered to all full-time employees.
A one-time reimbursement of $500 for home office setup or upgrades is provided.
An annual education and professional development allowance is available.
Employees receive a $75 monthly digital reimbursement.
Access to the coaching and growth platform BetterUp is included.
The company promotes an inclusive culture that values diversity, equity, and belonging.